How to Ensure Security on G4Skins: Reporting Security Vulnerabilities
Internet security is a priority, especially for the Counter-Strike 2 (CS2) gaming community. G4Skins is one of the most popular platforms dedicated to CS2 players, enabling case openings and skin purchases. We understand that user trust relies on the stability and security of our services. Collaborating with cybersecurity experts is key to identifying potential threats. If you discover a vulnerability in our platform, we encourage you to report it. Together, we can make G4Skins an even safer place, protecting both transactions and our users’ inventory.Bug Reporting Rules
To ensure your report is considered and potentially rewarded, please adhere to the following rules:- Detailed Report: Your report should include comprehensive information and steps to reproduce the issue. Reports lacking sufficient detail will not be considered.
- One Bug per Report: Report individual issues in separate submissions unless they are critically linked to demonstrate their impact on the service and platform.
- First-Come, First-Served: If multiple people report the same issue, we will reward the first report that allows full reproduction of the bug.
- One Reward for Root Cause: If multiple bugs stem from the same issue, we will grant one reward for the root cause.
- No Social Engineering: Phishing, vishing, or other social engineering techniques are strictly prohibited.
- Act Responsibly: Do not violate user privacy, destroy data, or disrupt the platform's operation. Only take actions with accounts you own or with the explicit permission of the account owner.
What to Avoid While Testing G4Skins?
When investigating potential security issues related to G4Skins and the Counter-Strike 2 (CS2) skin ecosystem, avoid:- Spamming and duplicating reports
- Phishing attacks and social engineering attempts targeting the G4Skins team
- Breaching G4Skins property, data centers, or other infrastructure
- Manipulating G4Skins balances on accounts you do not own
- Withdrawing CS2 skins from the service obtained through unethical means
- Stealing or disclosing private data of G4Skins users
- Conducting DDoS/DoS attacks, flooding, or other resource overload attempts. If using automated scanning tools, limit them to 5 requests per second (300 per minute) and a maximum of 5 concurrent requests (5 threads).
Bug Reporting and Disclosure Policy
We value transparency and effective collaboration. If you discover a potential security issue:- Report it as soon as possible: The sooner we receive a report, the sooner we can act to protect CS2 players using G4Skins.
- Give us time: Allow us a reasonable period to resolve the issue before publicly disclosing it or sharing it with third parties.
- Maintain ethical behavior: Avoid actions that could compromise privacy, destroy data, or disrupt the platform's operation.
Safe Harbor
All actions conducted in accordance with the above rules will be considered permissible. We will not take legal action against you. If a third party initiates legal steps against you for activities conducted in good faith under this policy, we will do everything possible to confirm that your actions complied with our program guidelines.Thank you for collaborating to protect Counter-Strike 2 players and G4Skins users! Your efforts contribute to creating a safer environment for the CS2 community.
